Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/6b5f7617-1a95-3d1b-ad32-758fc7bfc821.roa
File:                     6b5f7617-1a95-3d1b-ad32-758fc7bfc821.roa (raw, json)
Hash identifier:          jGhLSRtVFisdpCWIibM7R4wWmP8xkk4gY02fe/LGpjQ=
Subject key identifier:   FF:BC:04:C7:BD:3B:0E:DA:5D:A0:39:03:18:11:77:AC:A7:11:A6:D0
Certificate issuer:       /CN=233d8eef-51df-487b-9edb-f16ba403f442
Certificate serial:       010D0C9F4328584BAEC7B3659CA3CFB0AE2DD6E0
Authority key identifier: 56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/6b5f7617-1a95-3d1b-ad32-758fc7bfc821.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     22652
IP address blocks:        192.102.255.0/24 maxlen: 24
                          2607:3380::/40 maxlen: 40
                          2607:3380:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:b3:65:9c:a3:cf:b0:ae:2d:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233d8eef-51df-487b-9edb-f16ba403f442
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=7033aea4-97bf-419e-8a85-36a81acd9d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:bf:26:51:ed:db:7a:61:96:79:c5:43:9d:
                    fd:9e:76:a0:d0:eb:5a:05:97:f1:2e:01:e7:0a:c8:
                    f0:f3:e6:4c:d4:02:53:f4:03:a0:a7:90:16:6e:27:
                    d7:d6:94:ba:c6:05:7f:58:f2:46:b5:97:34:a8:89:
                    5b:18:de:10:a5:c3:f3:56:e9:cc:c0:1e:d6:19:55:
                    e3:dc:0e:28:77:e1:4a:a1:51:17:4c:e7:61:e4:15:
                    09:33:cf:d4:0c:5d:e7:a2:37:bb:a2:39:cf:4d:11:
                    cf:49:89:6c:89:70:18:2e:4a:cc:1a:77:1e:4f:09:
                    e2:05:ad:99:b4:0c:56:33:2f:25:db:aa:33:cf:4c:
                    fc:68:ab:eb:07:33:c2:48:f1:a4:73:14:9e:be:09:
                    07:9c:e8:1d:c8:ee:aa:09:19:4e:d2:8e:ad:21:e9:
                    1e:21:8a:6c:29:ad:aa:65:69:d5:37:2c:ce:7f:9b:
                    42:81:ca:25:af:23:52:6c:5c:fd:1a:ec:64:b6:d0:
                    36:a1:6f:87:c6:e6:9b:1d:21:f8:74:07:f4:b3:58:
                    8e:6f:d5:1d:97:42:cb:6a:d6:76:e9:fd:14:40:12:
                    6d:57:39:ad:28:42:2e:e3:56:0c:43:d9:1f:a7:e4:
                    6a:e6:62:2f:b0:bd:00:7e:a9:89:88:9d:a3:95:83:
                    73:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BC:04:C7:BD:3B:0E:DA:5D:A0:39:03:18:11:77:AC:A7:11:A6:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/6b5f7617-1a95-3d1b-ad32-758fc7bfc821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl

            X509v3 Authority Key Identifier:
                keyid:56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.255.0/24
                IPv6:
                  2607:3380::/40
                  2607:3380:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:96:44:30:61:4c:00:08:f5:3c:f5:5f:36:c4:5d:18:42:a1:
         1c:40:36:45:98:22:2e:b6:30:f5:80:3f:ec:4a:69:04:f2:f3:
         a6:74:d2:57:4e:b7:1c:80:27:26:0d:b9:85:4a:2d:79:bc:47:
         ed:76:cc:73:a6:39:74:64:45:ed:8a:ab:89:be:92:25:8f:3f:
         b0:c2:8d:6b:9d:6a:7b:92:63:f3:20:df:61:62:83:12:0e:cf:
         30:6c:0a:ce:a1:63:0c:43:c9:ce:4d:79:5c:40:b4:17:c2:27:
         39:84:0a:65:8a:57:5e:82:0b:8c:52:f1:3e:4e:05:f6:ef:8a:
         f3:56:3b:46:bb:a0:4a:a1:f5:61:23:8a:b5:c2:ee:79:7c:d8:
         92:98:fd:91:c8:c8:ba:c8:d7:0b:a9:61:fd:ee:a9:7d:6a:69:
         43:84:43:10:80:08:da:b6:69:d6:8b:8e:7d:66:bf:94:81:f5:
         a4:ff:24:de:f9:a9:7b:9c:c9:18:54:2f:72:77:20:ee:f8:82:
         a0:6f:8b:4d:34:c4:13:6f:5d:ea:eb:fe:3c:cb:46:94:df:be:
         33:7c:ca:2e:6d:4a:1c:5e:8e:d2:b6:d6:a1:68:8f:b9:90:a9:
         7e:39:90:2a:f4:58:60:c7:c3:92:bd:6b:78:11:f8:56:a2:af:
         dd:ef:00:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 2 05:15:45 2025 by rpki-client